Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/604508ee-6bf9-47f1-a46b-b394f344e9a3/4d10bd9d-6536-391f-828a-6e1205eb89a6.roa
File:                     4d10bd9d-6536-391f-828a-6e1205eb89a6.roa (raw, json)
Hash identifier:          ApsjyxMVCSKILCb1kiiqGHt8QT9BVY5zWOVh6tXTLj8=
Subject key identifier:   4B:05:7C:BD:7D:BA:B6:0B:E8:F2:C6:70:30:12:35:55:3B:EC:14:CD
Certificate issuer:       /CN=604508ee-6bf9-47f1-a46b-b394f344e9a3
Certificate serial:       010D0C9F4328584F31B7B78774BAD3A7BDAFC880
Authority key identifier: F0:74:65:A9:E9:2E:D2:E0:9B:DF:F5:35:B3:24:AC:AD:92:5F:76:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/604508ee-6bf9-47f1-a46b-b394f344e9a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/604508ee-6bf9-47f1-a46b-b394f344e9a3/4d10bd9d-6536-391f-828a-6e1205eb89a6.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     26830
IP address blocks:        2620:84:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/604508ee-6bf9-47f1-a46b-b394f344e9a3/604508ee-6bf9-47f1-a46b-b394f344e9a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/604508ee-6bf9-47f1-a46b-b394f344e9a3/604508ee-6bf9-47f1-a46b-b394f344e9a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/604508ee-6bf9-47f1-a46b-b394f344e9a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:b7:87:74:ba:d3:a7:bd:af:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604508ee-6bf9-47f1-a46b-b394f344e9a3
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=555e877a-c01a-4ca2-a8ba-b35e88d00bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:47:18:75:f9:f2:cf:0a:f3:1b:e5:a8:49:3a:
                    09:4c:f9:51:03:45:c4:02:34:f4:ac:54:5b:b5:8e:
                    02:6e:96:75:37:af:0e:06:d1:83:39:b0:8e:fd:31:
                    b0:a6:1f:5d:d8:a9:a1:1c:92:ba:02:dd:17:0f:d1:
                    0f:ea:93:17:13:38:4e:33:ff:99:a2:b6:fc:67:02:
                    7f:e7:a1:75:ec:d7:e3:0a:a7:fd:95:3b:b6:f3:72:
                    31:7d:a2:c9:f3:b1:2b:b3:62:62:da:b5:b1:f1:75:
                    cc:89:3e:14:07:ac:e1:de:14:54:29:68:78:5f:42:
                    a7:29:16:05:ed:31:9e:f8:66:dc:20:68:c9:f7:dd:
                    d4:dc:05:e8:32:7e:ab:a7:1b:97:76:a1:15:c1:41:
                    d0:ff:c3:93:96:89:22:6e:4b:dc:59:3e:ad:56:1f:
                    2c:f8:02:96:59:6e:2e:b1:eb:13:b5:32:8a:23:02:
                    ab:06:1d:0b:c8:5a:82:dc:45:ca:99:7a:67:91:ad:
                    ef:d9:e0:d7:b9:54:cf:c8:a2:80:5d:0c:6d:75:4d:
                    65:43:fe:ce:cb:5a:22:42:55:7a:69:3c:d9:db:70:
                    75:06:94:90:32:51:34:a1:38:89:83:f3:04:b6:d4:
                    4a:70:d5:3b:7a:0f:dd:ce:4f:7b:10:a8:90:7e:a7:
                    84:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:05:7C:BD:7D:BA:B6:0B:E8:F2:C6:70:30:12:35:55:3B:EC:14:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/604508ee-6bf9-47f1-a46b-b394f344e9a3/4d10bd9d-6536-391f-828a-6e1205eb89a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/604508ee-6bf9-47f1-a46b-b394f344e9a3/604508ee-6bf9-47f1-a46b-b394f344e9a3.crl

            X509v3 Authority Key Identifier:
                keyid:F0:74:65:A9:E9:2E:D2:E0:9B:DF:F5:35:B3:24:AC:AD:92:5F:76:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/604508ee-6bf9-47f1-a46b-b394f344e9a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:84:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:47:df:e1:d9:d6:f1:6e:69:b9:3d:0d:9a:3f:f4:92:a8:db:
         08:65:97:db:f0:60:42:51:39:ff:e7:d3:1b:41:03:27:ca:70:
         7b:14:11:d2:36:3f:97:7f:10:38:e1:9f:b0:e1:fe:c6:ce:13:
         67:13:87:f3:c8:f9:7c:9a:c2:de:f7:dd:9e:e2:8f:a5:97:14:
         99:4b:cc:0a:97:66:1c:c1:36:22:9a:d3:51:18:0f:41:78:ad:
         b6:9f:9c:2d:fd:68:f4:e1:c4:28:c8:58:81:cc:d3:23:bd:fa:
         eb:97:90:6f:9a:c2:ae:ee:60:79:34:22:81:57:04:21:9a:df:
         ce:d6:fd:16:f8:af:f7:84:88:c1:3e:72:1f:07:37:7d:38:7e:
         56:fb:6c:86:4d:86:b7:56:06:98:be:6d:5b:b5:28:11:fd:ca:
         29:a7:e4:7e:92:5c:de:94:91:ac:de:55:81:e8:bc:8d:7f:2e:
         34:71:9d:05:c4:f5:e6:ce:c2:32:fa:1c:ee:e4:f2:e0:57:b7:
         50:2b:54:0a:ab:c6:8e:01:bd:ab:f9:09:9d:06:5c:76:e7:b4:
         25:9a:6f:a0:68:2e:96:d1:60:bd:6d:13:2e:d0:eb:5a:1c:d0:
         fd:f6:2a:10:90:8f:ce:ee:79:12:e3:72:81:7e:30:d3:89:fb:
         d4:8a:7d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:56:34 2026 by rpki-client